bukaw

[TrustedSec @TrustedSec]

JavaScript escaped the browser. JS-Tap v3 followed it. In our new #blog, Principal Security Consultant @hoodoer introduces three new beacons targeting the Electron apps, browser extensions, and Node runtimes running on corporate workstations. Read it now! https://t.co/grPGL6iBKA

[MatheuZ @MatheuzSecurity]

Trend Micro Deep Security Agent Research: Forcing bmhook/tmhook Reloads to Open a Protection Bypass Window

Full research: https://t.co/bZFOyMptG5

#rootkit #linux #edr #poc

[Blackstorm Security @blackstormsecbr]

Bypassing Windows authentication reflection mitigations for SYSTEM shells - Part 1

https://t.co/UKgpvQ29HA

#reverseengineering #informationsecurity #infosec #cybersecurity #windows #redteam #hacking #pentest

[y198 @y198_nt]

Over the next few months, we'll be gradually publishing some of our internal security research.

Starting with a bug chain that turns Nginx-Rift + Nginx-PoolSlip into full RCE.

More to come.
#Nginx #1day #RCE
https://t.co/tqQMFAoX9P

[tetsuo @tetsuoai]

11 hours of reverse engineering, exploit dev, rop chains, custom shellcode, code caves. In 11 minutes.

[Ziad Salah @Zierax_x]

now Grafana Final Scanner have more CVEs 🥳🥳🥳
https://t.co/l9K3DyIYcz

[cr3ghost @cr3ghost]

Alexandre Borges has published over 700 pages of free security, malware and vulnerability research.

A complete Malware Analysis Series covering Windows, macOS, iOS, Linux and shellcode. An Exploiting Reversing Series covering Windows kernel exploitation, Hyper-V, Chrome, and a three-part deep dive on CVE-2024-30085.

No paywall. No course. Just research. Free as in beer.

https://t.co/x516DQRcB8

Author: @ale_sp_brazil

#ReverseEngineering #MalwareAnalysis #InfoSec

[Muqsit 𝕏 @mqst_]

Pentesting 101: Kubernetes Pentesting Complete Guide for Beginners

Guide: https://t.co/0RGPpifW4j

#infosec #cloud

[0xor0ne @0xor0ne]

Five-bug chain in Samsung Galaxy Store leading to arbitrary local APK install (@bugscale)

https://t.co/JkETYmOglg

#infosec

[Alisa Esage Шевченко @alisaesage]

All the defenses you must break to exploit Chrome

[cr3ghost @cr3ghost]

Loki C2 by @0xBoku and @d_tranman script-jacks vulnerable Electron apps to backdoor and hollow them without invalidating their code signing signature.

VS Code. Cursor. Discord. GitHub Desktop. Docker Desktop. The list keeps growing.

MITRE ATT&CK T1218.015 | Azure Blob C2 | BOF/shellcode/assembly exec

https://t.co/24sJ1PHeb4

#RedTeam #RedTeamTips #OffSec #OffensiveSecurity #Evasion #WDAC #AppControl #PenTest #PenTesting #Malware #ThreatIntel #MITREATTACK #CyberSecurity #InfoSec #Hacking

[Nicolas Krassas @Dinosn]

AMSI/ETW Bypass from Unprivileged Context: Assumed Breach Without Admin https://t.co/yZe3bBQQd9

[Panos Gkatziroulis 🦄 @ipurple]

Advanced EDR Evasion via AI Telemetry Spoofing & WASM Sandboxing. Project Onyx is a PoC Red Team pipeline designed to demonstrate advanced evasion techniques against modern EDR systems https://t.co/j26UbHlFkd

[NullSecurityX @NullSecurityX]

From a tiny race condition in Linux Bluetooth SCO to a full kernel LPE.

The Secunnix team dissected the vulnerable path, engineered a heap spray + SMEP bypass, and turned a subtle UAF into reliable uid=0 execution all demonstrated on real QEMU/KVM runs.

https://t.co/ltxeVRALKY

[johnny @zeroxjf]

Well this one being dismissed as not a security vulnerability is more surprising than the last time as it's a kernel data abort, but so be it. Another iOS 26.5 panic, disclosed here. Enjoy https://t.co/JPWHPyBIiw

[Nicolas Krassas @Dinosn]

Windows rootkit for Intel x64 with 25+ features, demonstrating rootkit techniques compatible with all Windows 10 and Windows 11 versions. https://t.co/Df1mE2lkJZ

[Geek Lite @QingQ77]

给 Claude Code 装一套漏洞赏金和红队渗透技能包，51 个技能、574+ 报告模式、24 个漏洞类，一装就变身老练研究员。

https://t.co/Gaz5IoC1L4

[Nicolas Krassas @Dinosn]

DPI bypass via fake TLS ClientHello injection with wrong TCP sequence number. Rust port of @patterniha's SNI-Spoofing. Linux, macOS, Windows. Works with v2ray/xray VLESS configs behind Cloudflare. https://t.co/ahX9s7fXko

[Blackstorm Security @blackstormsecbr]

CVE-2026-28910: Breaking macOS App Sandbox Data Containers, TCC, and Hijacking Apps Using Archive Utility:

https://t.co/qQgEJz93in

#cybersecurity #macOS #vulnerability #cve #exploitation

[NetAskari @NetAskari]

EXCLUSIVE: How the track foreigners in China - We got rare access to demo system developed by the Ministry of Public Security in China for the prefecture of Zhangjiakou, to track and surveil foreigners visiting or being residents ( actually it applies to most nationals as well, but in this case it seems to be aimed at foreigners ). It is officially known as "Dynamic control platform for overseas personnel". 1/12